Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/RPwGyZABObCpLoeZsKLtcUm3vRY.roa
File: RPwGyZABObCpLoeZsKLtcUm3vRY.roa (raw, json)
Hash identifier: CQNeZRgmUzjhGb2pqpSB3OG37a0PP9qSQmqKLnSKFLw=
Subject key identifier: 44:FC:06:C9:90:01:39:B0:A9:2E:87:99:B0:A2:ED:71:49:B7:BD:16
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 018CC42469573682D35C7ED95DA068A283B5
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/RPwGyZABObCpLoeZsKLtcUm3vRY.roa
Signing time: Mon 01 Jan 2024 08:29:29 +0000
ROA not before: Mon 01 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3170
IP address blocks: 2001:67c:3e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:69:57:36:82:d3:5c:7e:d9:5d:a0:68:a2:83:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44fc06c9900139b0a92e8799b0a2ed7149b7bd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:be:dc:f1:91:f6:61:20:01:56:28:94:0c:
60:fb:58:ae:3e:5a:06:17:7e:05:8d:fd:f3:3f:fe:
31:57:94:45:a9:00:18:d7:4a:91:e9:b6:7e:81:01:
04:6b:a5:f1:23:d2:ce:99:35:4e:a5:6e:e4:52:4b:
7e:4f:25:c2:09:09:88:da:f2:f6:44:1e:6b:67:ce:
c0:ae:6a:a3:67:3b:e1:91:4b:74:f3:4c:02:f0:b1:
08:af:55:69:db:12:15:2a:84:ab:22:02:2b:cc:7b:
20:f2:18:63:b5:f2:a9:df:66:00:50:3e:0c:a6:cf:
d6:82:cc:36:61:50:c8:dc:f8:bf:60:5e:f1:dc:97:
f4:81:b8:56:15:55:9d:99:66:7e:29:2f:41:39:42:
4d:e1:69:2c:e1:40:7f:43:78:a2:0d:19:a5:29:ef:
ec:c9:00:87:61:b8:3f:41:c5:a3:76:b2:b5:4a:3a:
32:f4:f2:34:a8:a4:fb:87:50:8f:39:fd:fc:b8:33:
e9:3c:f1:57:00:62:9d:8e:44:79:90:a2:3e:45:7f:
25:e9:fd:fc:df:af:8c:d2:a9:93:69:a0:94:be:1d:
01:1e:2e:c7:62:d3:01:4c:31:0e:f0:db:be:4f:32:
ad:92:2e:de:f4:14:a3:4e:64:ae:6b:3e:58:18:50:
b2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FC:06:C9:90:01:39:B0:A9:2E:87:99:B0:A2:ED:71:49:B7:BD:16
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/RPwGyZABObCpLoeZsKLtcUm3vRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:3e0::/48
Signature Algorithm: sha256WithRSAEncryption
29:a8:6d:fb:de:c6:47:c3:14:a2:bf:54:ca:8b:74:9f:8e:25:
09:31:ca:23:32:2e:d8:fc:df:4e:bb:f4:f6:69:f4:0d:12:16:
a1:85:b7:f4:fa:fd:d0:61:eb:3d:49:5c:d8:16:9b:8a:d7:16:
0c:15:65:52:87:d8:03:60:da:0b:ce:a0:35:a4:1d:de:60:34:
fe:c1:44:f9:04:e2:4d:03:ad:42:b7:07:25:cb:09:ea:58:a2:
70:8d:20:3d:56:f9:82:1c:18:3b:ee:c8:f8:33:7f:e9:06:d0:
d1:70:52:12:97:25:50:74:1f:b1:ad:82:c1:d9:e2:1b:44:69:
cf:ac:49:8e:67:52:ef:b6:88:a2:bd:1f:65:5c:0b:1f:b0:04:
25:68:1f:7f:78:46:4e:77:bd:3b:bc:c0:a1:84:02:3d:6f:59:
e0:80:f3:e9:47:a7:74:7d:79:15:b5:a7:f6:8e:5a:4a:ab:40:
34:3b:86:0d:25:fc:b4:b6:ea:67:84:0e:fa:dc:c5:b7:89:b8:
1f:34:59:e8:d1:b4:89:72:12:3e:46:48:c6:38:30:6e:4a:17:
ad:5b:50:c1:ce:b1:6f:a4:35:eb:ad:27:36:a3:83:90:08:1b:
ea:0e:eb:53:e6:60:20:c7:0b:69:f3:8d:e7:4d:0a:ec:ee:00:
63:61:44:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:44 2025 by rpki-client